PhotoBoost legal
Privacy & Cookie Policy
Last updated: July 22, 2026
How PhotoBoost handles accounts, selected images, AI processing, purchases, analytics, advertising choices and privacy rights.
1. Who we are and what this policy covers
Smart Media Internet Marketing Ltd. (“Smart Media,” “we,” “us,” or “our”) operates PhotoBoost. This policy explains how we handle personal data through photoboost.ai, the PhotoBoost web editor, desktop applications, mobile applications, accounts, payments and support.
Smart Media Internet Marketing Ltd., Company ID 514548544, Sderot Hayahsut 11, Beer Sheva, Israel, is the controller for the processing described here unless another notice says otherwise.
2. Data we collect
Depending on how you use PhotoBoost, we collect:
- Account data: Google account identifier, name, email, profile image, authentication tokens and session records.
- Images and processing data: files you select, generated results, processing options, job identifiers, technical logs and error information needed to complete and secure the request.
- Purchase data: subscription, transaction, product, price, currency, status, renewal, cancellation, country and related customer records. Payment providers handle full payment-card details; PhotoBoost does not store full card numbers.
- Device and usage data: browser, device, operating system, IP address, pages, feature actions, performance, referral and campaign identifiers such as UTM values, gclid, gbraid and wbraid.
- Communications: messages, support requests and feedback you send us.
3. How image processing works
The web editor stores project images and edits in your browser’s IndexedDB so you can continue local work. They remain there until you delete the project, clear editor or browser storage, or remove the application data.
When you request cloud enhancement, the selected file is uploaded through a protected upload URL to PhotoBoost processing infrastructure. We process only the images you choose; PhotoBoost does not scan your photo library. Remote content and results are retained only as reasonably needed to complete delivery, maintain security and reliability, resolve support issues, and meet legal obligations, then deleted or de-identified under operational retention procedures.
We do not use your uploaded images to train AI models unless we separately ask for and receive your explicit consent. Photo enhancement detects visual features, including faces when you select face enhancement, but PhotoBoost is not designed to identify who a person is.
4. Why we use data and our legal bases
We use data to provide processing and downloads; authenticate accounts; maintain projects, credits and subscriptions; process payments; prevent fraud and abuse; debug and secure the Service; communicate with you; comply with law; and improve features and performance.
Where applicable, our legal bases are performance of our contract with you, our legitimate interests in operating and securing PhotoBoost, compliance with legal obligations, and your consent for optional analytics or advertising technologies. You may withdraw consent at any time without affecting prior lawful processing.
5. Cookies, analytics and advertising
Necessary cookies and local storage support sessions, security, purchases, one-time trials, editor projects and saved preferences. PhotoBoost also uses Plausible, Google Analytics, Google Ads, Mixpanel and Firebase for audience, product and campaign measurement. Analytics and advertising measurement start enabled for a new visitor. The cookie banner lets you accept or disable optional categories, and the saved choice is applied on later visits.
If optional storage is disabled, the Google tag may continue to send cookieless measurement signals for aggregate reporting and conversion modeling. Campaign parameters may be kept in session storage so the editor and purchase flow remain attributed after navigation. .
6. When we share data
We disclose data only as reasonably needed to:
- cloud, database, security, content-delivery and AI-processing providers that operate PhotoBoost;
- Google for account authentication, Firebase, Analytics and Ads where enabled;
- Mixpanel and Plausible where analytics is enabled;
- Paddle, Zotlo, Apple, Google Play and other identified payment or app-store providers;
- AWS or another email provider for service messages;
- professional advisers, authorities or counterparties when required by law, safety, fraud prevention or a corporate transaction.
Service providers are permitted to process data only for contracted purposes and subject to appropriate safeguards. We do not sell uploaded images.
7. International transfers
We and our providers may process data in Israel, the United States, the European Economic Area and other countries. Where required, we use adequacy decisions, contractual safeguards or another lawful transfer mechanism. You may contact us for more information about safeguards relevant to your data.
8. Retention
We keep personal data only as long as needed for the purposes above. Account and subscription records generally remain while the account is active and for a reasonable period afterward. Transaction and tax records may be kept for legally required periods. Security and diagnostic logs are kept for shorter operational periods unless needed to investigate abuse or an incident.
Browser-stored projects are controlled from your device. Cloud image-processing retention is limited according to operational need as described above. Backup deletion may be delayed until normal backup rotation completes.
9. Security
We use technical and organizational measures intended to protect data, including access controls, encrypted transport, restricted processing systems and monitoring. No online service is completely secure, so keep original images and use secure devices and accounts.
10. Your privacy rights
Depending on your location, you may request access, correction, deletion, restriction, portability or objection; withdraw consent; or complain to a supervisory authority. You may also opt out of certain targeted advertising or sale/sharing concepts where local law applies.
Use the cookie settings above for optional browser technologies. For account or data requests, email [email protected] from the address linked to your account. We may verify identity and may retain data where law or legitimate security needs require it. Authorized agents may submit requests where local law permits.
11. Children
PhotoBoost is not directed to children under 13, and we do not knowingly collect their personal data. If you believe a child has provided data in violation of this policy, contact us so we can investigate and delete it where required.
12. Changes and contact
We may update this policy as PhotoBoost, our providers or legal requirements change. We will post the revised policy, update the date above, and provide additional notice where required for material changes.
Questions or requests may be sent to Smart Media Internet Marketing Ltd., Sderot Hayahsut 11, Beer Sheva, Israel, or [email protected].
Smart Media Internet Marketing Ltd. · Company ID 514548544 · Sderot Hayahsut 11, Beer Sheva, Israel.
Questions? Email [email protected].